This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft File: ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft (raw, json) Hash identifier: 8y2/7uq9BcB8x1zbxFlFoLTJvcCzviZrFM3a6ET0tv8= Subject key identifier: CE:40:6D:DF:D7:9D:EA:DA:94:48:4F:2D:0B:83:FA:B6:04:FE:83:09 Authority key identifier: 82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8 Certificate issuer: /CN=821219469c6df76cf476f274cdcf27e52f8f0df8 Certificate serial: 019AF31D00B59AEC1C44CDF88D0D683B04FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft Manifest number: 0755 Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: fdOHadbduUc9htmWTS-jPq_zv2U.roa (hash: gZYnTf+6Tdj5UA3epTVfXJljvvit6fFaXTM2YVnS+ZA=) 2: ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl (hash: lBkqWBVnYbC+cfbX7Jo9wdbvUy5Bc4i+GXk6cNoF68s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:00:b5:9a:ec:1c:44:cd:f8:8d:0d:68:3b:04:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821219469c6df76cf476f274cdcf27e52f8f0df8 Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=ce406ddfd79deada94484f2d0b83fab604fe8309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:dd:3c:87:06:e6:3b:a4:45:30:61:a3:87: 0c:27:7d:a6:e4:e2:3b:a6:7c:a3:85:df:fb:f6:d0: 00:d3:4b:84:11:cb:f3:15:b6:76:c2:7d:99:23:e6: 2e:aa:aa:27:e3:74:68:da:9c:8b:22:fa:ce:39:cc: 5d:f5:bf:83:f3:32:25:90:da:e8:0e:0e:f0:75:e5: f3:ab:a3:fa:a9:f2:3b:e7:1f:a3:6b:15:fd:5c:b6: 04:ba:62:8d:05:7d:c5:d6:08:0d:31:6f:73:31:e2: b9:20:3b:45:61:59:3f:8e:48:41:94:03:c6:b0:ce: 43:ec:b5:10:01:5d:24:6b:ab:80:38:f6:20:9a:c2: 83:20:d8:ef:7e:8c:97:99:97:e4:92:e1:0f:a1:a5: f9:76:ec:ab:f4:74:91:3c:94:30:32:97:7f:c5:7f: ae:90:5c:46:22:ad:06:8c:8d:cb:c2:10:f1:f3:e6: 37:ee:c4:7d:9c:65:5a:c0:f8:79:27:cd:0c:76:8f: ce:c6:b5:be:bd:c1:6f:68:d2:33:a5:74:ad:96:d6: 91:d4:cb:27:b2:32:b8:0f:fc:52:08:87:1b:d0:ea: fb:04:cf:4c:33:fb:25:98:40:5f:e2:92:e9:16:f2: 28:ec:26:e1:98:6c:2b:d3:75:43:b0:86:4f:d5:47: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:40:6D:DF:D7:9D:EA:DA:94:48:4F:2D:0B:83:FA:B6:04:FE:83:09 X509v3 Authority Key Identifier: keyid:82:12:19:46:9C:6D:F7:6C:F4:76:F2:74:CD:CF:27:E5:2F:8F:0D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghIZRpxt92z0dvJ0zc8n5S-PDfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a1a11d-11fb-4424-8cd4-0daa0704b992/1/ghIZRpxt92z0dvJ0zc8n5S-PDfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:34:28:4e:d7:c0:3d:b7:20:c1:ad:c2:0b:04:1f:12:af:24: 29:8b:69:42:8f:a0:00:60:58:0f:81:4f:5f:3d:4b:2e:a6:5c: e5:44:a4:ac:8b:0d:90:20:63:79:dd:97:e3:66:71:f3:72:a9: 93:a7:23:73:ee:81:2e:ec:ce:c4:e2:dc:5e:76:d9:9f:9f:34: 6d:08:1c:c4:d1:32:ca:ed:6f:5a:c4:9e:63:07:50:cb:ac:16: ee:d3:29:0c:b1:03:7a:58:ec:17:91:2d:dd:51:05:b0:cc:15: 71:ea:0d:2f:6a:0f:44:b3:a0:3d:c7:b1:e9:39:07:5f:29:6d: 0c:43:3f:46:a5:51:0f:01:64:2b:48:d5:f2:e8:9e:8b:04:1f: 18:71:a2:d6:1e:93:2b:28:fd:97:e6:3a:70:12:02:26:ec:48: 00:24:16:83:37:da:28:bd:c1:a0:39:ed:d7:e8:96:23:57:45: f4:41:60:5c:ef:eb:43:35:f3:f5:cd:7b:4c:78:0a:ae:b5:ed: a8:f4:cb:72:51:b6:7c:ae:34:80:93:de:3c:7a:de:19:d2:f1: f4:44:a0:c9:60:26:f3:c5:4c:9f:c0:46:6f:15:a1:b1:53:5e: a1:e2:41:cc:56:bf:9a:fe:b1:2a:19:71:4f:a9:8a:10:44:dc: 31:2c:03:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQC1muwcRM34jQ1oOwT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMTIxOTQ2OWM2ZGY3NmNmNDc2ZjI3NGNkY2YyN2U1MmY4 ZjBkZjgwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD EyhjZTQwNmRkZmQ3OWRlYWRhOTQ0ODRmMmQwYjgzZmFiNjA0ZmU4MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG/dPIcG5jukRTBho4cMJ32m5OI7 pnyjhd/79tAA00uEEcvzFbZ2wn2ZI+Yuqqon43Ro2pyLIvrOOcxd9b+D8zIlkNro Dg7wdeXzq6P6qfI75x+jaxX9XLYEumKNBX3F1ggNMW9zMeK5IDtFYVk/jkhBlAPG sM5D7LUQAV0ka6uAOPYgmsKDINjvfoyXmZfkkuEPoaX5duyr9HSRPJQwMpd/xX+u kFxGIq0GjI3LwhDx8+Y37sR9nGVawPh5J80Mdo/OxrW+vcFvaNIzpXStltaR1Msn sjK4D/xSCIcb0Or7BM9MM/slmEBf4pLpFvIo7CbhmGwr03VDsIZP1UeJ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5Abd/XneralEhPLQuD+rYE/oMJMB8GA1UdIwQY MBaAFIISGUacbfds9HbydM3PJ+Uvjw34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hJWlJweHQ5MnowZHZKMHpjOG41Uy1QRGZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMWExMWQtMTFmYi00NDI0LThjZDQt MGRhYTA3MDRiOTkyLzEvZ2hJWlJweHQ5MnowZHZKMHpjOG41Uy1QRGZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hMWExMWQtMTFmYi00NDI0LThjZDQtMGRhYTA3MDRiOTky LzEvZ2hJWlJweHQ5MnowZHZKMHpjOG41Uy1QRGZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzQoTtfA Pbcgwa3CCwQfEq8kKYtpQo+gAGBYD4FPXz1LLqZc5USkrIsNkCBjed2X42Zx83Kp k6cjc+6BLuzOxOLcXnbZn580bQgcxNEyyu1vWsSeYwdQy6wW7tMpDLEDeljsF5Et 3VEFsMwVceoNL2oPRLOgPcex6TkHXyltDEM/RqVRDwFkK0jV8uieiwQfGHGi1h6T Kyj9l+Y6cBICJuxIACQWgzfaKL3BoDnt1+iWI1dF9EFgXO/rQzXz9c17THgKrrXt qPTLclG2fK40gJPePHreGdLx9ESgyWAm88VMn8BGbxWhsVNeoeJBzFa/mv6xKhlx T6mKEETcMSwDOA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:17:04 2025 by rpki-client